cisco-security-research

Cisco 安全研究 研究员： 0xReadingSteiner 联系方式： [email protected] 厂商： Cisco Systems, Inc. 厂商通知时间： 2026-08-04 Cisco PSIRT, ZDI, SSD 厂商回应： 无 为什么会有这项研究 针对市面上可购买的 Cisco 产品的独立安全研究，已在多个产品线中发现严重漏洞——包括企业依赖的语音通信、协作和网络安全系统。 发布前曾进行多次协调尝试： 17 份提交 至 Zero Day Initiative ZDI — 未处理 SSD 暂停了所有 Cisco 漏洞收购，并表示 Cisco...

Linux Distros Unpatched Vulnerability : CVE-2026-78221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-78221 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

Linux Distros Unpatched Vulnerability : CVE-2026-49275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to unsupported mapping details. This specific CVE designation is currently marked as reserved or has not yet been populated with a...

Linux Distros Unpatched Vulnerability : CVE-2026-80741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/log: Fix out-of-bounds read on empty message length drmlogdrawkmsgrecord accesses slen - 1 to strip the trailing newline, but len is unsigned int. If len is...

Linux Distros Unpatched Vulnerability : CVE-2026-31912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with ...

Linux Distros Unpatched Vulnerability : CVE-2026-86140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. CVE-2026-86140 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-80734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some...

EUVD-2026-71088

A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key Handler. Such manipulation of the argument apikeyapi.user leads to improper privilege management. The attack may be...

Linux Distros Unpatched Vulnerability : CVE-2026-84732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - openvpn - None Ubuntu Linux - Unknown description CVE-2026-84732 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-84451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libheif - None Ubuntu Linux - Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read CVE-2026-84451 Not...

Linux Distros Unpatched Vulnerability : CVE-2026-84450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libheif - None Ubuntu Linux - Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read CVE-2026-84450 Not...

Linux Distros Unpatched Vulnerability : CVE-2026-80762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each...

Linux Distros Unpatched Vulnerability : CVE-2026-85052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory...

Linux Distros Unpatched Vulnerability : CVE-2026-80795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix out-of-bounds write in ncitargetautoactivated ncitargetautoactivated appends a target to the fixed-size array ndev-targetsNCIMAXDISCOVEREDTARGETS...

Linux Distros Unpatched Vulnerability : CVE-2026-71198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - glance - None Ubuntu Linux - Unknown description CVE-2026-71198 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-65107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix sbcast shared objects skipping credential verification, Fix possible slurmd crash on invalid sbcast filenames...

Linux Distros Unpatched Vulnerability : CVE-2026-80229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations...

Linux Distros Unpatched Vulnerability : CVE-2026-18924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in...

Linux Distros Unpatched Vulnerability : CVE-2026-52131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function. CVE-2026-52131 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2026-53683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - resetpassword.html parses query string parameters and uses the 'url' parameter as a redirection target window.location = url after password reset, optionally...